last executing test programs: 1m46.258903371s ago: executing program 2 (id=8383): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000000)=0x7, 0x4) 1m46.052707551s ago: executing program 2 (id=8385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002800)=@updpolicy={0x28c, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@local, 0x2, 0x0, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x2f}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000000, 0x4}, {0x0, 0x3fffffffffffd, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x1}}, @tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x2}, 0x4d4, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x34ff, 0x4, 0x6, 0xfc, 0xa, 0x0, 0x7fff}]}, @tmpl={0x184, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d6, 0x6c}, 0x2, @in=@multicast1, 0x3501, 0x0, 0x3, 0x8, 0x8, 0x0, 0x400}, {{@in=@empty, 0x4d3, 0x32}, 0x2, @in=@broadcast, 0x3506, 0x4, 0x3, 0x5, 0x1a, 0x10000000, 0x2}, {{@in=@loopback, 0x4d6, 0x2b}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3505, 0x0, 0x1, 0x8, 0x6, 0x6, 0x5fc}, {{@in=@empty, 0x4d5, 0x2b}, 0xa, @in=@multicast1, 0x3500, 0x4, 0x2, 0xff, 0x2, 0x2, 0x311d9dc2}, {{@in=@private=0xa010101, 0x4d5, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x3505, 0x0, 0x0, 0x1, 0x8, 0x3, 0x5}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x27}, 0x4d2, 0x3c}, 0xa, @in6=@mcast2, 0x3501, 0x0, 0x1, 0x9, 0x9, 0x4, 0xf50d}]}]}, 0x28c}}, 0x0) 1m45.84837304s ago: executing program 2 (id=8389): capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000380)={0x7, 0x7, 0x4, 0x1ff, 0x101, 0x1}) io_setup(0x222, &(0x7f0000000180)) 1m45.588621083s ago: executing program 2 (id=8394): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000003, &(0x7f0000000140)={[{@adinicb}, {@unhide}, {@anchor={'anchor', 0x3d, 0xec1}}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@undelete}, {@volume={'volume', 0x3d, 0xb1}}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x2}}]}, 0xde, 0xc2e, &(0x7f0000000f40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m45.236831979s ago: executing program 2 (id=8400): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x18, 0xb9a, 0x6, 0x4}}) 1m44.78363231s ago: executing program 2 (id=8408): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x400002}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x54}}, 0x1020) 1m44.340188711s ago: executing program 32 (id=8408): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x400002}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x54}}, 0x1020) 3.145462133s ago: executing program 0 (id=9666): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90324fc60100005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) 3.019455539s ago: executing program 0 (id=9668): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$TUNGETFEATURES(r0, 0x5452, &(0x7f00000013c0)) 2.799348709s ago: executing program 0 (id=9672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a050000000000000000000700000a0900010073797a30000000000800024000000002280000001c0a010800000000000000000700000a08000240000000000900010073797a30"], 0x78}, 0x1, 0x0, 0x0, 0x4001}, 0x40c0) 2.588780319s ago: executing program 0 (id=9677): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x13, 0x32, 0x605, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x0) 2.35284853s ago: executing program 0 (id=9681): r0 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 2.242924415s ago: executing program 3 (id=9684): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x25dfdbff, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0xfffffed1}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 2.196894827s ago: executing program 0 (id=9685): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100127aa18080204025683490102030109021200010000500f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.964882299s ago: executing program 3 (id=9689): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) 1.889722032s ago: executing program 1 (id=9691): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000380)=""/40, &(0x7f00000003c0)=0x28) 1.849244213s ago: executing program 3 (id=9692): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0023a4732e3923d680da64c567cfeede5d0028d033482f8d5940f0abec842ebc3fa6b41572f12b2bcaeb8e057a6d6e55de2c736aca4c20525798d8fb741b34334e2caf047d4ef4c2b5dba5b811e70646ae41262032e378fdcdab"], 0x1, 0x236, &(0x7f0000000000)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiAwyo5k9m3M+kyMjMwMBw5u/V4AeMdgy3rjIwMsht8Fdb/O2PVOXGTfWR06siaqZ2N91cuj6OYZv+3ysmUu8nZoT9f3BIUMsiL//DPBml75sb5nyoqXti4tjZqDyXv/Xy33fvY2qLE9SYHot3FbLxJ7hp1XxydnKzfDw3vbp9S7Higqw0l4nHpl78m3B8LQPD5AtPbPVrzrAzKMZwSrlVzo0BxQfXMvXzdW9eMByM+jyRgZGRgYGJgWFm2M49yP4qb4BGBgPIByoMIEUsDGmZOakGHgyMDMxQjiELVBVMNRMDB1hCLzk/J6WdgRGcBMDaljOwwM0wfMzAyg9SDuIYPWZghcsYWzRATWJoh9Igyxn+M8OEGZZD6cdQWh4t2bCATeiH8jQaGBjYGCoS//MXGbIxMDBUJJaUFBlCxEpKiozgYkYCcJuZoLbOZUL13HEmhlEwCkbBKBgFo2AUjIJRMApGwSgYyQAQAAD///ZbuHk=") 1.754178838s ago: executing program 1 (id=9694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080087006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.525534339s ago: executing program 1 (id=9696): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_buf(r0, 0x1, 0x4a, 0x0, &(0x7f0000000080)) 1.49548813s ago: executing program 3 (id=9697): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x163042) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) 1.366841046s ago: executing program 1 (id=9698): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000140)=""/138, &(0x7f00000002c0)=0x8a) 1.327180689s ago: executing program 3 (id=9699): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000000c0)=ANY=[@ANYBLOB='intr,heartbeat=none,dir_resv_level=000000000,resv_level=00000000000000000006,coherency=full,localflocks,coherency=full,commit=00000000001613114240,\x00'], 0x3, 0x444b, &(0x7f0000004480)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 1.208306474s ago: executing program 1 (id=9701): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)="07fc", 0x2}], 0x1) 1.041307322s ago: executing program 1 (id=9703): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 902.182469ms ago: executing program 4 (id=9704): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x1, 0x70bd2d, 0xe4, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x600}}, @TCA_SKBEDIT_PTYPE={0x3, 0x7, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) 636.75323ms ago: executing program 4 (id=9705): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x20, 0x1418, 0x1, 0x0, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000814}, 0x44810) 589.949823ms ago: executing program 4 (id=9706): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90424fc600d00030009230100ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 421.871ms ago: executing program 4 (id=9707): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) 355.904454ms ago: executing program 3 (id=9708): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@resuid}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@bsdgroups}, {@quota}]}, 0x2, 0x450, &(0x7f0000000880)="$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") creat(&(0x7f0000000180)='./file1\x00', 0x1) 215.36261ms ago: executing program 4 (id=9709): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$TCXONC(r0, 0x540a, 0xe3376a7694b26f32) 0s ago: executing program 4 (id=9710): syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x5c, 0xc9}}}, 0x6) kernel console output (not intermixed with test programs): ge from 0 to 4096 [ 830.457338][T23156] ntfs: (device loop3): parse_options(): NLS character set 850 not found. Using previous one iso8859-5. [ 830.504859][T23156] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 830.523044][ T5823] r8152-cfgselector 2-1: Unknown version 0x0000 [ 830.551028][T23156] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 830.565103][ T5823] r8152-cfgselector 2-1: USB disconnect, device number 111 [ 830.622036][T23156] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 830.653597][T23156] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 830.709694][T23156] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 830.771397][T23156] ntfs: volume version 3.1. [ 830.794660][T23156] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 830.817510][T23156] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 830.868962][T23156] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 830.911651][T23156] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 831.087045][T23171] loop2: detected capacity change from 0 to 256 [ 831.115669][T23171] exfat: Deprecated parameter 'utf8' [ 831.166194][T23171] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 831.551664][ T5820] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 831.660034][T23191] loop0: detected capacity change from 0 to 512 [ 831.723072][T23193] loop3: detected capacity change from 0 to 1024 [ 831.740315][T23191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.746728][ T5820] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 831.771956][T23193] EXT4-fs: inline encryption not supported [ 831.778507][ T5820] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 831.798588][ T5820] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 831.799700][T23191] ext4 filesystem being mounted at /1967/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 831.819714][T23193] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 831.831500][ T5820] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 831.851488][ T5820] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 831.871507][ T5820] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 831.882524][T23198] loop2: detected capacity change from 0 to 4096 [ 831.890579][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.902348][T23177] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 831.909823][T23177] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 831.918232][T23177] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 831.928970][ T5820] mos7720 2-1:1.0: Moschip 2 port adapter converter detected [ 831.948687][T23193] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.7868: lblock 2 mapped to illegal pblock 2 (length 1) [ 831.997977][T23198] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 832.021788][T23198] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 832.036617][T23193] EXT4-fs (loop3): Remounting filesystem read-only [ 832.069625][T23193] EXT4-fs (loop3): 1 orphan inode deleted [ 832.103886][T23193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.119112][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.166106][ T2963] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 832.221800][ T5775] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 832.228446][ T5775] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 832.246772][ T5775] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 832.263272][ T48] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 832.398970][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.431706][ T5820] usb 2-1: mos7720: usb_control_msg() failed: -71 [ 832.484749][ T5820] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 832.562172][ T5820] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 832.652141][ T5820] usb 2-1: USB disconnect, device number 112 [ 832.658253][ C0] usb 2-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 832.691453][T23209] netlink: 'syz.2.7873': attribute type 2 has an invalid length. [ 832.700322][T23209] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7873'. [ 832.720218][ T5820] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 832.733851][T23211] usb usb9: usbfs: process 23211 (syz.0.7874) did not claim interface 0 before use [ 832.772181][ T5820] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 832.802891][ T5820] mos7720 2-1:1.0: device disconnected [ 832.942528][T23218] loop0: detected capacity change from 0 to 512 [ 832.957521][T23218] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 832.972798][T23218] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 832.991932][T23218] EXT4-fs (loop0): orphan cleanup on readonly fs [ 833.011770][T23218] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.7877: Block bitmap for bg 0 marked uninitialized [ 833.037966][T23218] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 833.055101][T23218] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.7877: Block bitmap for bg 0 marked uninitialized [ 833.109767][T23218] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 833.120173][T23218] EXT4-fs (loop0): 1 orphan inode deleted [ 833.128715][T23218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 833.230066][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.434631][T23231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7882'. [ 833.458291][T23234] loop2: detected capacity change from 0 to 16 [ 833.486348][T23231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7882'. [ 833.758765][T23242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 834.270011][T23260] loop0: detected capacity change from 0 to 1024 [ 834.300998][T23258] loop2: detected capacity change from 0 to 4096 [ 834.304614][T23260] EXT4-fs: inline encryption not supported [ 834.348472][T23260] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 834.400604][T23260] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.7897: lblock 2 mapped to illegal pblock 2 (length 1) [ 834.415847][T23260] EXT4-fs (loop0): Remounting filesystem read-only [ 834.427163][T23260] EXT4-fs (loop0): 1 orphan inode deleted [ 834.435095][T23260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 834.463776][T23267] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 834.514793][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.541760][T23269] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 834.615908][T23271] nfs: Unexpected value for 'lock' [ 834.927938][T23278] netlink: 'syz.3.7904': attribute type 2 has an invalid length. [ 834.953108][T23278] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7904'. [ 835.011190][T23276] loop0: detected capacity change from 0 to 4096 [ 835.093471][T23276] ntfs: volume version 3.1. [ 835.400797][T23293] loop3: detected capacity change from 0 to 512 [ 835.447853][T23293] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 835.498608][T23293] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 835.561948][T23293] EXT4-fs (loop3): orphan cleanup on readonly fs [ 835.568645][T23293] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.7911: Block bitmap for bg 0 marked uninitialized [ 835.603167][T23293] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 835.638913][T23300] netlink: 'syz.2.7914': attribute type 1 has an invalid length. [ 835.646866][T23300] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7914'. [ 835.664426][T23293] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.7911: Block bitmap for bg 0 marked uninitialized [ 835.689376][T23293] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 835.741770][T23293] EXT4-fs (loop3): 1 orphan inode deleted [ 835.752306][T23293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 835.829123][T23306] netlink: 'syz.2.7917': attribute type 1 has an invalid length. [ 835.904952][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.452003][T23321] nvme nvme0: rdma_resolve_addr failed (-19). [ 836.589305][ T5779] Bluetooth: hci0: command tx timeout [ 836.636849][T23334] loop3: detected capacity change from 0 to 136 [ 837.337472][T23362] team0: entered promiscuous mode [ 837.345966][T23362] team0: entered allmulticast mode [ 837.351519][T23362] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 837.826055][T23381] netlink: 'syz.3.7952': attribute type 4 has an invalid length. [ 837.842338][T23381] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.7952'. [ 837.929525][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 837.929541][ T28] audit: type=1326 audit(2000000245.110:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.7955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dcf9e159 code=0x7ffc0000 [ 837.982378][ T28] audit: type=1326 audit(2000000245.160:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.7955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dcf9e159 code=0x7ffc0000 [ 838.036175][ T28] audit: type=1326 audit(2000000245.190:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.7955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71dcf9e159 code=0x7ffc0000 [ 838.060446][T14396] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 838.082522][T23387] loop0: detected capacity change from 0 to 128 [ 838.112377][T23387] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 838.129454][ T28] audit: type=1326 audit(2000000245.190:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.7955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dcf9e159 code=0x7ffc0000 [ 838.161541][T23387] FAT-fs (loop0): Filesystem has been set read-only [ 838.171767][T23387] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 838.187199][ T28] audit: type=1326 audit(2000000245.190:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.7955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dcf9e159 code=0x7ffc0000 [ 838.243847][T14396] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 838.253319][T14396] usb 3-1: config 0 has no interface number 0 [ 838.259483][T14396] usb 3-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 838.281279][T14396] usb 3-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 838.304349][T14396] usb 3-1: config 0 interface 216 has no altsetting 0 [ 838.311231][T14396] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 838.340811][T14396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.368703][T14396] usb 3-1: config 0 descriptor?? [ 838.384642][T23379] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 838.395315][T14396] usb 3-1: NFC: intf ffff8880302c4000 id ffffffff8da5b860 [ 838.531349][T23397] loop3: detected capacity change from 0 to 256 [ 838.548953][T23398] netlink: 'syz.0.7962': attribute type 1 has an invalid length. [ 838.564293][T23397] exfat: Deprecated parameter 'utf8' [ 838.586913][T23397] exfat: Deprecated parameter 'namecase' [ 838.591733][T23398] netlink: 'syz.0.7962': attribute type 1 has an invalid length. [ 838.601613][T23397] exfat: Deprecated parameter 'namecase' [ 838.627715][T23397] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 838.654413][T14396] usb 3-1: USB disconnect, device number 11 [ 838.918093][T23404] loop3: detected capacity change from 0 to 512 [ 839.305803][T23415] netlink: 'syz.3.7971': attribute type 1 has an invalid length. [ 839.314047][T23415] netlink: 'syz.3.7971': attribute type 1 has an invalid length. [ 839.337498][T23410] 8021q: adding VLAN 0 to HW filter on device bond4 [ 839.575071][T23422] loop0: detected capacity change from 0 to 256 [ 839.623714][T23422] exfat: Deprecated parameter 'utf8' [ 839.657428][T23422] exfat: Deprecated parameter 'namecase' [ 839.678824][T23422] exfat: Deprecated parameter 'namecase' [ 839.739666][T23422] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 839.913633][T23435] SET target dimension over the limit! [ 840.388829][T23449] nvme nvme0: rdma_resolve_addr failed (-19). [ 840.554902][T23456] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7990'. [ 840.591779][T23459] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7991'. [ 840.761666][T23465] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7993'. [ 840.908623][T23471] xt_limit: Overflow, try lower: 2/2147483648 [ 841.056468][T23443] loop3: detected capacity change from 0 to 32768 [ 841.088776][T23443] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.7983 (23443) [ 841.125513][T23443] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 841.137706][T23443] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 841.150018][T23443] BTRFS info (device loop3): using free space tree [ 841.272061][ T28] audit: type=1326 audit(2000000248.430:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23489 comm="syz.0.8008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f9e159 code=0x7ffc0000 [ 841.325792][T23443] BTRFS info (device loop3): enabling ssd optimizations [ 841.361428][T23443] BTRFS info (device loop3): auto enabling async discard [ 841.396055][ T28] audit: type=1326 audit(2000000248.430:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23489 comm="syz.0.8008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f9e159 code=0x7ffc0000 [ 841.471957][ T28] audit: type=1326 audit(2000000248.440:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23489 comm="syz.0.8008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f4299f9e159 code=0x7ffc0000 [ 841.560827][ T28] audit: type=1326 audit(2000000248.440:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23489 comm="syz.0.8008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f9e159 code=0x7ffc0000 [ 841.592940][T23496] nvme nvme0: rdma_resolve_addr failed (-19). [ 841.618946][T23502] netlink: 'syz.2.8003': attribute type 2 has an invalid length. [ 841.635649][T23502] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8003'. [ 841.652916][ T5783] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 841.663336][ T28] audit: type=1326 audit(2000000248.440:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23489 comm="syz.0.8008" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f9e159 code=0x7ffc0000 [ 842.362992][T23523] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8014'. [ 842.394132][T23523] netlink: 'syz.1.8014': attribute type 3 has an invalid length. [ 842.533898][T23528] loop3: detected capacity change from 0 to 64 [ 842.918010][T23541] AppArmor: change_hat: Invalid input '' [ 843.219366][T23555] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8029'. [ 843.250313][T23555] netlink: 'syz.0.8029': attribute type 3 has an invalid length. [ 843.444696][T23559] nvme nvme0: rdma_resolve_addr failed (-19). [ 843.736008][T23574] loop3: detected capacity change from 0 to 256 [ 843.822247][T23576] loop2: detected capacity change from 0 to 1024 [ 843.843333][T23576] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 843.888394][T23574] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 843.904203][T23578] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 844.016393][T23574] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 844.061632][T23574] exFAT-fs (loop3): Filesystem has been set read-only [ 844.080743][T23574] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 844.456256][T23594] loop2: detected capacity change from 0 to 2048 [ 844.479807][T23594] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 844.511813][T23597] loop0: detected capacity change from 0 to 2048 [ 844.605750][T23597] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 844.627146][T23600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8052'. [ 844.667431][T23602] No source specified [ 845.182830][T23618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8061'. [ 845.202722][T23618] tc_dump_action: action bad kind [ 845.304463][ T28] audit: type=1326 audit(2000000252.490:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23621 comm="syz.0.8064" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f9e159 code=0x7ffc0000 [ 845.381460][ T28] audit: type=1326 audit(2000000252.490:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23621 comm="syz.0.8064" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f9e159 code=0x7ffc0000 [ 845.441253][ T28] audit: type=1326 audit(2000000252.490:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23621 comm="syz.0.8064" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f4299f9e159 code=0x7ffc0000 [ 845.529446][ T28] audit: type=1326 audit(2000000252.490:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23621 comm="syz.0.8064" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f9e159 code=0x7ffc0000 [ 846.008422][T23648] loop2: detected capacity change from 0 to 256 [ 846.069390][T23648] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 846.169224][T23648] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 846.182408][T23648] exFAT-fs (loop2): Filesystem has been set read-only [ 846.189323][T23648] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 846.604610][T23666] netlink: 'syz.0.8085': attribute type 5 has an invalid length. [ 846.658185][T23668] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 846.969644][T23674] bridge4: entered promiscuous mode [ 847.220979][T23682] CIFS mount error: No usable UNC path provided in device string! [ 847.220979][T23682] [ 847.261595][T23682] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 847.352488][T23664] loop3: detected capacity change from 0 to 32768 [ 847.406144][T23664] JBD2: Ignoring recovery information on journal [ 847.527865][T23664] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 847.632434][T23664] (syz.3.8084,23664,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 847.701295][T23664] (syz.3.8084,23664,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 847.732328][T23664] (syz.3.8084,23664,1):ocfs2_symlink:1874 ERROR: status = -2 [ 847.739940][T23664] (syz.3.8084,23664,1):ocfs2_symlink:2075 ERROR: status = -2 [ 847.797818][T23700] nft_compat: unsupported protocol 1 [ 847.950892][ T5783] ocfs2: Unmounting device (7,3) on (node local) [ 848.265177][T23710] __vm_enough_memory: pid: 23710, comm: syz.2.8107, not enough memory for the allocation [ 848.357129][T23695] loop0: detected capacity change from 0 to 32768 [ 848.708277][T23724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8112'. [ 848.753826][T23726] comedi comedi1: pcl816: I/O port conflict (0x6,16) [ 848.763146][ T28] audit: type=1326 audit(2000000255.950:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23727 comm="syz.3.8115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 848.844989][ T28] audit: type=1326 audit(2000000255.950:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23727 comm="syz.3.8115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 848.901510][ T28] audit: type=1326 audit(2000000255.980:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23727 comm="syz.3.8115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 848.987261][T23730] erspan1: entered promiscuous mode [ 849.023735][T23730] erspan1: entered allmulticast mode [ 849.028272][ T28] audit: type=1326 audit(2000000255.980:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23727 comm="syz.3.8115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 849.105466][ T28] audit: type=1326 audit(2000000255.980:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23727 comm="syz.3.8115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 849.224929][ T28] audit: type=1326 audit(2000000255.980:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23727 comm="syz.3.8115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 850.095704][T23770] ipip0: entered promiscuous mode [ 850.239978][T23775] netlink: 'syz.3.8137': attribute type 75 has an invalid length. [ 850.246080][T14396] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 850.445818][T23780] usb usb8: usbfs: process 23780 (syz.0.8140) did not claim interface 0 before use [ 850.467330][T14396] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 850.483835][T14396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.501724][T14396] usb 3-1: Product: syz [ 850.511923][T14396] usb 3-1: Manufacturer: syz [ 850.521729][T14396] usb 3-1: SerialNumber: syz [ 850.574603][T23778] loop3: detected capacity change from 0 to 8192 [ 850.613671][T23778] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 850.701674][T23782] netlink: 25 bytes leftover after parsing attributes in process `syz.0.8141'. [ 850.710709][T23782] netlink: 25 bytes leftover after parsing attributes in process `syz.0.8141'. [ 850.946270][T14396] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 850.989512][T14396] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 851.047173][T14396] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 851.082210][T14396] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 851.118535][T14396] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 851.156171][T14396] lan78xx: probe of 3-1:1.0 failed with error -71 [ 851.197640][T23796] sctp: [Deprecated]: syz.3.8148 (pid 23796) Use of int in max_burst socket option. [ 851.197640][T23796] Use struct sctp_assoc_value instead [ 851.222216][T14396] usb 3-1: USB disconnect, device number 12 [ 851.369962][T23802] netlink: 'syz.1.8151': attribute type 1 has an invalid length. [ 852.559476][T23853] bridge0: entered promiscuous mode [ 852.684359][T23855] veth3: entered promiscuous mode [ 852.695489][T23857] netlink: 'syz.1.8178': attribute type 1 has an invalid length. [ 852.722474][T23857] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.8178'. [ 852.771826][T23857] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8178'. [ 853.066949][T23872] program syz.0.8184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 853.164580][T23876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 853.281554][ T27] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 853.376234][T23884] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8190'. [ 853.426167][T23886] loop3: detected capacity change from 0 to 512 [ 853.478061][ T27] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 853.492553][ T27] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 853.530351][ T27] usb 2-1: config 220 has no interface number 2 [ 853.560533][ T27] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 853.598203][ T27] usb 2-1: config 220 interface 0 has no altsetting 0 [ 853.615341][ T27] usb 2-1: config 220 interface 76 has no altsetting 0 [ 853.630519][ T27] usb 2-1: config 220 interface 1 has no altsetting 0 [ 853.651004][ T27] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 853.671782][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.690366][ T27] usb 2-1: Product: syz [ 853.696566][ T27] usb 2-1: Manufacturer: syz [ 853.716270][ T27] usb 2-1: SerialNumber: syz [ 853.865371][T23898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8196'. [ 853.939168][ T27] usb 2-1: selecting invalid altsetting 0 [ 853.962737][ T27] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 853.969176][ T27] usb 2-1: No valid video chain found. [ 853.985182][ T27] usb 2-1: selecting invalid altsetting 0 [ 853.991183][ T27] usbtest: probe of 2-1:220.1 failed with error -22 [ 854.003912][ T27] usb 2-1: USB disconnect, device number 113 [ 854.173449][T23909] loop2: detected capacity change from 0 to 2048 [ 854.220663][T23909] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 854.572022][T14396] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 854.592330][T23924] xt_CT: You must specify a L4 protocol and not use inversions on it [ 854.774109][T14396] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 854.786285][T14396] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.808590][T14396] usb 4-1: config 0 has no interface number 0 [ 854.825602][T14396] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 854.872067][T14396] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 854.900131][T14396] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 854.920564][T14396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.942500][T14396] usb 4-1: Product: syz [ 854.946901][T14396] usb 4-1: Manufacturer: syz [ 854.969649][T14396] usb 4-1: SerialNumber: syz [ 854.976919][T23935] netlink: 'syz.1.8215': attribute type 6 has an invalid length. [ 854.992544][T14396] usb 4-1: config 0 descriptor?? [ 855.305298][T23930] loop2: detected capacity change from 0 to 32768 [ 855.327208][T23930] JBD2: Ignoring recovery information on journal [ 855.393523][T23930] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 855.420184][ T9621] usb 4-1: USB disconnect, device number 110 [ 855.449435][T23930] (syz.2.8211,23930,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 855.467306][T23930] (syz.2.8211,23930,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 855.477068][T23930] (syz.2.8211,23930,0):ocfs2_symlink:1874 ERROR: status = -2 [ 855.485006][T23930] (syz.2.8211,23930,0):ocfs2_symlink:2075 ERROR: status = -2 [ 855.567069][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 855.727017][T23949] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8221'. [ 856.039475][T23960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 856.155910][T23964] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8227'. [ 856.177611][T23964] netlink: 'syz.2.8227': attribute type 1 has an invalid length. [ 856.196355][T23964] netlink: 'syz.2.8227': attribute type 2 has an invalid length. [ 856.221940][T23964] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8227'. [ 856.283164][T23968] (syz.3.8229,23968,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 856.322553][T23968] (syz.3.8229,23968,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 856.463798][T23976] netlink: 'syz.2.8241': attribute type 1 has an invalid length. [ 856.481566][T23975] veth3: entered promiscuous mode [ 856.633638][T14396] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 856.821953][T14396] usb 2-1: Using ep0 maxpacket: 32 [ 856.841757][T14396] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.867115][T14396] usb 2-1: New USB device found, idVendor=0c0b, idProduct=a109, bcdDevice=22.db [ 856.884543][T14396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.901706][T14396] usb 2-1: Product: syz [ 856.905948][T14396] usb 2-1: Manufacturer: syz [ 856.910596][T14396] usb 2-1: SerialNumber: syz [ 856.934979][T14396] usb 2-1: config 0 descriptor?? [ 856.943467][T14396] ums-datafab 2-1:0.0: USB Mass Storage device detected [ 856.962827][T14396] ums-datafab 2-1:0.0: Quirks match for vid 0c0b pid a109: 1 [ 857.015493][T14396] ums-sddr55 2-1:0.0: USB Mass Storage device detected [ 857.147983][ T9621] usb 2-1: USB disconnect, device number 114 [ 857.744021][T24005] sit0: entered promiscuous mode [ 857.749278][T24005] netlink: 'syz.3.8247': attribute type 1 has an invalid length. [ 857.807270][T24007] veth3: entered promiscuous mode [ 858.166381][T24024] loop3: detected capacity change from 0 to 16 [ 858.212274][T24024] erofs: (device loop3): mounted with root inode @ nid 36. [ 858.262309][T24024] erofs: (device loop3): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 858.297568][T24024] syz.3.8254: attempt to access beyond end of device [ 858.297568][T24024] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 858.406579][T24024] erofs: (device loop3): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 858.448695][T24024] syz.3.8254: attempt to access beyond end of device [ 858.448695][T24024] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 858.466361][T24024] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192] [ 858.478335][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 858.478350][ T28] audit: type=1800 audit(2000000265.660:666): pid=24024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8254" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 858.593354][T24034] loop0: detected capacity change from 0 to 2048 [ 858.644675][T24034] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 859.307954][T24058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.607193][T24075] netlink: 'syz.0.8278': attribute type 12 has an invalid length. [ 859.624174][T24075] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8278'. [ 860.135231][T24093] loop3: detected capacity change from 0 to 736 [ 860.207634][T24093] rock: directory entry would overflow storage [ 860.222282][T24093] rock: sig=0x3b10, size=4, remaining=3 [ 860.271678][T24097] vivid-007: ================= START STATUS ================= [ 860.289234][T24097] vivid-007: Generate PTS: true [ 860.322105][T24097] vivid-007: Generate SCR: true [ 860.327164][T24097] tpg source WxH: 640x360 (Y'CbCr) [ 860.342150][T24097] tpg field: 1 [ 860.351816][T24097] tpg crop: 640x360@0x0 [ 860.359027][T24097] tpg compose: 640x360@0x0 [ 860.381574][T24097] tpg colorspace: 8 [ 860.386802][T24097] tpg transfer function: 0/0 [ 860.399888][T24097] tpg Y'CbCr encoding: 0/0 [ 860.422723][T24097] tpg quantization: 0/0 [ 860.427026][T24097] tpg RGB range: 0/2 [ 860.432820][T24097] vivid-007: ================== END STATUS ================== [ 861.428739][T24126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8305'. [ 861.491494][T14396] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 861.687489][T14396] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 861.696727][T14396] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 861.722468][T14396] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 861.750431][T14396] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 861.752004][T24135] netlink: 'syz.1.8309': attribute type 10 has an invalid length. [ 861.791432][T14396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 861.811460][T14396] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 861.839193][T14396] usb 3-1: string descriptor 0 read error: -22 [ 861.846704][T14396] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 861.871933][T14396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.884604][T24135] team0: Port device syz_tun added [ 861.915167][T14396] usb 3-1: config 0 descriptor?? [ 861.923917][T24117] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 861.936288][T14396] hub 3-1:0.0: bad descriptor, ignoring hub [ 861.954743][T14396] hub: probe of 3-1:0.0 failed with error -5 [ 861.990491][T24143] overlayfs: conflicting options: userxattr,redirect_dir=on [ 862.011667][T14396] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input48 [ 862.364985][ T5820] usb 3-1: USB disconnect, device number 13 [ 862.528884][T24155] netlink: 'syz.0.8319': attribute type 1 has an invalid length. [ 862.715516][T24141] loop3: detected capacity change from 0 to 32768 [ 862.739040][T24141] (syz.3.8312,24141,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 862.764079][T24141] (syz.3.8312,24141,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 862.876066][T24141] JBD2: Ignoring recovery information on journal [ 863.035058][T24141] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 863.380747][ T5783] ocfs2: Unmounting device (7,3) on (node local) [ 863.841832][T24195] kAFS: unable to lookup cell '(,c/' [ 864.627374][T24231] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8354'. [ 864.711975][ T5820] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 864.919819][ T5820] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 864.939997][ T5820] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 864.976818][ T5820] usb 3-1: New USB device found, idVendor=04dd, idProduct=0105, bcdDevice= 0.00 [ 865.004605][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.031707][ T5820] usb 3-1: Product: syz [ 865.036007][ T5820] usb 3-1: Manufacturer: syz [ 865.061344][ T5820] usb 3-1: SerialNumber: syz [ 865.075185][ T5820] usb 3-1: bad CDC descriptors [ 865.211099][T24252] loop3: detected capacity change from 0 to 64 [ 865.283613][ T5820] usb 3-1: USB disconnect, device number 14 [ 865.392980][T24256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8367'. [ 865.427812][T24259] loop3: detected capacity change from 0 to 512 [ 865.436597][T24259] EXT4-fs: Ignoring removed mblk_io_submit option [ 865.453706][T24259] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 865.488429][T24259] EXT4-fs (loop3): Test dummy encryption mode enabled [ 865.529168][T24262] netlink: 'syz.0.8370': attribute type 10 has an invalid length. [ 865.543427][T24262] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 865.562453][T24259] EXT4-fs (loop3): orphan cleanup on readonly fs [ 865.619741][T24259] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.8368: Attempting to read directory block (0) that is past i_size (256) [ 865.720942][T24259] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 865.764449][T24259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 865.968948][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 866.029671][ T28] audit: type=1326 audit(2000000273.200:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24274 comm="syz.1.8377" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dcf9e159 code=0x7ffc0000 [ 866.134082][ T28] audit: type=1326 audit(2000000273.200:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24274 comm="syz.1.8377" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dcf9e159 code=0x7ffc0000 [ 866.221574][ T28] audit: type=1326 audit(2000000273.210:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24274 comm="syz.1.8377" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dcf9e159 code=0x7ffc0000 [ 866.285277][ T28] audit: type=1326 audit(2000000273.210:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24274 comm="syz.1.8377" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dcf9e159 code=0x7ffc0000 [ 866.382298][ T28] audit: type=1326 audit(2000000273.240:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24274 comm="syz.1.8377" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f71dcf9e159 code=0x7ffc0000 [ 866.449969][ T28] audit: type=1326 audit(2000000273.240:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24274 comm="syz.1.8377" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dcf9e159 code=0x7ffc0000 [ 866.525504][ T28] audit: type=1326 audit(2000000273.240:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24274 comm="syz.1.8377" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dcf9e159 code=0x7ffc0000 [ 866.609134][ T28] audit: type=1326 audit(2000000273.240:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24274 comm="syz.1.8377" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f71dcf9e159 code=0x7ffc0000 [ 866.696400][ T28] audit: type=1326 audit(2000000273.240:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24274 comm="syz.1.8377" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f71dcf9e159 code=0x7ffc0000 [ 867.127112][T24312] loop2: detected capacity change from 0 to 2048 [ 867.186573][T24312] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 867.343409][ T5775] UDF-fs: error (device loop2): udf_read_inode: (ino 1440) failed !bh [ 867.364060][ T5775] UDF-fs: error (device loop2): udf_read_inode: (ino 1440) failed !bh [ 867.647142][T24330] qrtr: Invalid version 164 [ 868.130870][T24342] netlink: 'syz.3.8411': attribute type 10 has an invalid length. [ 868.586126][T24353] usb usb7: usbfs: process 24353 (syz.3.8417) did not claim interface 0 before use [ 868.968684][T24359] loop3: detected capacity change from 0 to 1024 [ 869.166378][ T28] audit: type=1800 audit(2000000276.350:676): pid=24359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8420" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 869.273668][T24369] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 869.285985][T24369] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 869.308524][T24369] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 869.350416][T24369] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 869.373502][T24369] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 869.382017][T24369] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 869.782187][T24388] loop0: detected capacity change from 0 to 16 [ 869.823754][T24388] erofs: (device loop0): mounted with root inode @ nid 36. [ 869.888776][T24388] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 869.920700][T24388] syz.0.8427: attempt to access beyond end of device [ 869.920700][T24388] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 869.965739][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.972246][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.994158][T24388] erofs: (device loop0): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 870.034336][T24388] syz.0.8427: attempt to access beyond end of device [ 870.034336][T24388] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 870.089335][T24388] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192] [ 870.142265][T24388] syz.0.8427 (24388) used greatest stack depth: 19376 bytes left [ 871.463049][ T5779] Bluetooth: hci1: command tx timeout [ 871.737742][T24367] chnl_net:caif_netlink_parms(): no params data found [ 871.823755][T24455] trusted_key: encrypted_key: master key parameter is missing [ 872.155393][ T48] dvmrp0 (unregistering): left allmulticast mode [ 872.219931][T24465] netlink: 212 bytes leftover after parsing attributes in process `syz.3.8456'. [ 872.648053][T24367] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.678296][T24367] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.695538][T24367] bridge_slave_0: entered allmulticast mode [ 872.708843][T24367] bridge_slave_0: entered promiscuous mode [ 872.817591][T24367] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.827491][T24367] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.835627][T24367] bridge_slave_1: entered allmulticast mode [ 872.863283][T24367] bridge_slave_1: entered promiscuous mode [ 872.999413][T24367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.018688][T24367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.099768][ T48] hsr_slave_0: left promiscuous mode [ 873.110083][ T48] hsr_slave_1: left promiscuous mode [ 873.342441][ T48] bond4 (unregistering): Released all slaves [ 873.367767][ T48] bond3 (unregistering): Released all slaves [ 873.396058][ T48] bond2 (unregistering): Released all slaves [ 873.544162][ T5779] Bluetooth: hci1: command tx timeout [ 873.663792][ T48] bond1 (unregistering): Released all slaves [ 874.848569][ T48] bond0 (unregistering): Released all slaves [ 874.925962][T24367] team0: Port device team_slave_0 added [ 874.936408][T24367] team0: Port device team_slave_1 added [ 874.994201][T24367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.001219][T24367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.030043][T24367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.051085][T24367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.059935][T24367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.101616][T24367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.204490][T24367] hsr_slave_0: entered promiscuous mode [ 875.215235][T24367] hsr_slave_1: entered promiscuous mode [ 875.621515][ T5779] Bluetooth: hci1: command tx timeout [ 875.669944][T24367] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 875.700332][T24367] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 875.720695][T24367] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 875.751647][T24367] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 875.887893][T24367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.920197][T24367] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.934613][T12800] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.943433][T12800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.965732][T12800] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.973026][T12800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.266160][T24367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.628818][T24367] veth0_vlan: entered promiscuous mode [ 876.653001][T24367] veth1_vlan: entered promiscuous mode [ 876.697725][T24367] veth0_macvtap: entered promiscuous mode [ 876.709823][T24367] veth1_macvtap: entered promiscuous mode [ 876.744133][T24367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.764315][T24367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.778082][T24367] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.788904][T24367] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.801277][T24367] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.815326][T24367] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.992911][T12800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.000835][T12800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.064139][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.074964][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.551778][ T9621] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 877.716124][ T5779] Bluetooth: hci1: command tx timeout [ 877.772285][ T9621] usb 5-1: Using ep0 maxpacket: 16 [ 877.788224][ T9621] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 877.797443][ T9621] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.808452][ T9621] usb 5-1: config 0 has no interface number 0 [ 877.820647][ T9621] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 877.830487][ T9621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.839877][ T9621] usb 5-1: Product: syz [ 877.844551][ T9621] usb 5-1: Manufacturer: syz [ 877.849218][ T9621] usb 5-1: SerialNumber: syz [ 877.857404][ T9621] usb 5-1: config 0 descriptor?? [ 877.868668][ T9621] uvcvideo 5-1:0.105: Found Unit with invalid ID 0 [ 877.875893][ T9621] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 877.882672][ T9621] usb 5-1: No valid video chain found. [ 878.075598][ T9621] usb 5-1: USB disconnect, device number 2 [ 878.718003][T24593] loop3: detected capacity change from 0 to 512 [ 878.754549][T24593] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 878.825988][T24593] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.8467: inode has both inline data and extents flags [ 878.864053][T24593] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.8467: couldn't read orphan inode 15 (err -117) [ 878.927203][T24593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 879.201018][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.469581][T24622] loop0: detected capacity change from 0 to 1024 [ 879.509702][T24622] EXT4-fs: inline encryption not supported [ 879.567265][T24622] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 879.577924][T24625] netlink: 'syz.4.8481': attribute type 10 has an invalid length. [ 879.591216][T24622] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 879.662962][T24622] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.8480: lblock 2 mapped to illegal pblock 2 (length 1) [ 879.696241][T24622] __quota_error: 1 callbacks suppressed [ 879.696260][T24622] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 879.716644][T24625] team0: Port device syz_tun added [ 879.724368][T24622] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz.0.8480: Invalid inode table block 1 in block_group 0 [ 879.792286][T24622] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 879.837930][T24622] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #3: comm syz.0.8480: mark_inode_dirty error [ 879.887327][T24622] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 879.930111][T24622] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.8480: Failed to acquire dquot type 0 [ 879.967757][T24622] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 879.994421][T24622] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.8480: mark_inode_dirty error [ 880.035460][T24637] netlink: 'syz.4.8484': attribute type 10 has an invalid length. [ 880.040005][T24622] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 880.046131][ T28] audit: type=1326 audit(2000000287.220:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24635 comm="syz.3.8485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 880.102963][T24622] EXT4-fs (loop0): 1 orphan inode deleted [ 880.110642][T24622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 880.132066][ T3539] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 880.150471][ T28] audit: type=1326 audit(2000000287.270:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24635 comm="syz.3.8485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 880.219306][ T28] audit: type=1326 audit(2000000287.270:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24635 comm="syz.3.8485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 880.251892][ T3539] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 880.261993][ T3539] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 0 [ 880.271831][ T28] audit: type=1326 audit(2000000287.270:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24635 comm="syz.3.8485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 880.319874][T24622] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.8480: lblock 0 mapped to illegal pblock 48 (length 1) [ 880.377121][T24622] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 880.391512][ T28] audit: type=1326 audit(2000000287.270:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24635 comm="syz.3.8485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 880.551211][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.565610][ T5780] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 880.600285][ T5780] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 880.623398][ T5780] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 880.874592][T24651] loop3: detected capacity change from 0 to 2048 [ 880.952901][T24651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 881.727262][T24684] netlink: 'syz.3.8508': attribute type 2 has an invalid length. [ 881.735591][T24684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8508'. [ 882.235118][T24697] bond3: option ad_user_port_key: invalid value (1031) [ 882.266380][T24697] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 882.294692][T24697] bond3 (unregistering): Released all slaves [ 882.477210][T24706] loop4: detected capacity change from 0 to 1024 [ 882.633340][ T59] hfsplus: bad catalog file entry [ 883.233822][ T5820] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 883.421592][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 883.428910][ T5820] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 883.437257][ T5820] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 883.446300][ T5820] usb 2-1: config 1 has no interface number 1 [ 883.452759][ T5820] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 883.466580][ T5820] usb 2-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 883.479736][ T5820] usb 2-1: config 1 interface 105 has no altsetting 0 [ 883.492168][ T5820] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 883.504167][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.512290][ T5820] usb 2-1: Product: syz [ 883.516485][ T5820] usb 2-1: Manufacturer: syz [ 883.521104][ T5820] usb 2-1: SerialNumber: syz [ 883.531887][T24718] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 883.751505][ T5820] aqc111: probe of 2-1:1.105 failed with error -22 [ 883.973354][ T27] usb 2-1: USB disconnect, device number 115 [ 884.601749][T24725] netlink: 'syz.1.8523': attribute type 10 has an invalid length. [ 884.962766][T24731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8527'. [ 886.043874][T24761] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000) [ 886.106593][T24738] loop0: detected capacity change from 0 to 32768 [ 886.195394][T24738] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 886.321067][T24777] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 886.581603][T24738] XFS (loop0): Ending clean mount [ 886.918793][ T5780] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 887.407631][T24807] netlink: 'syz.4.8557': attribute type 1 has an invalid length. [ 887.523946][T24804] loop3: detected capacity change from 0 to 8192 [ 887.552187][T24804] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 887.602053][T24812] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8558'. [ 888.143259][T24832] netlink: 'syz.0.8568': attribute type 32 has an invalid length. [ 889.088299][T24870] loop4: detected capacity change from 0 to 64 [ 889.117310][T24870] MINIX-fs: mounting file system with errors, running fsck is recommended [ 889.180748][T24870] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 889.278433][T24874] xt_TCPMSS: Only works on TCP SYN packets [ 889.853832][T24893] openvswitch: netlink: Actions may not be safe on all matching packets [ 889.889888][T24895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8599'. [ 890.135745][T24904] netlink: del zone limit has 8 unknown bytes [ 890.355894][T24910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8605'. [ 890.399703][T24910] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8605'. [ 890.450263][T24882] loop0: detected capacity change from 0 to 32768 [ 890.555354][T24882] [ 890.555354][T24882] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 890.555354][T24882] [ 890.756228][ T5780] [ 890.756228][ T5780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 890.756228][ T5780] [ 890.802587][ T5780] [ 890.802587][ T5780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 890.802587][ T5780] [ 890.987817][T24929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8612'. [ 891.303386][T24941] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8616'. [ 891.353132][T24941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8616'. [ 891.524942][T24947] ieee802154 phy0 wpan0: encryption failed: -22 [ 891.772647][T24960] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8623'. [ 893.023859][T24962] loop3: detected capacity change from 0 to 32768 [ 893.118637][T24962] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 893.366478][T24990] loop0: detected capacity change from 0 to 40427 [ 893.389061][T24990] F2FS-fs (loop0): invalid crc value [ 893.452486][T24962] XFS (loop3): Ending clean mount [ 893.492930][T24990] F2FS-fs (loop0): Found nat_bits in checkpoint [ 893.682734][T24990] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 893.732339][ T5783] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 894.874948][T25054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8652'. [ 895.535547][T25078] xt_hashlimit: overflow, try lower: 6/0 [ 895.653242][T25044] loop0: detected capacity change from 0 to 32768 [ 896.021746][ T5820] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 896.221453][ T5820] usb 5-1: Using ep0 maxpacket: 32 [ 896.227601][T25097] loop0: detected capacity change from 0 to 512 [ 896.249652][ T5820] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 896.275269][ T5820] usb 5-1: config 0 has no interface number 0 [ 896.297673][ T5820] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 896.315287][ T5820] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 896.328744][ T5820] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 896.330627][T25097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.338032][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.338059][ T5820] usb 5-1: Product: syz [ 896.338077][ T5820] usb 5-1: Manufacturer: syz [ 896.338094][ T5820] usb 5-1: SerialNumber: syz [ 896.393440][ T5820] usb 5-1: config 0 descriptor?? [ 896.405594][T25097] ext4 filesystem being mounted at /2167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 896.597904][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.651607][ T5820] radio-si470x 5-1:0.35: this is not a si470x device. [ 896.852520][ T5820] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 896.919221][ T5820] usb 5-1: USB disconnect, device number 3 [ 896.959325][T25114] loop0: detected capacity change from 0 to 512 [ 897.052147][T25114] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 897.116984][T25114] EXT4-fs (loop0): Remounting filesystem read-only [ 897.168125][T25114] EXT4-fs (loop0): 1 truncate cleaned up [ 897.200470][T25114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.396014][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.684536][T25140] loop4: detected capacity change from 0 to 512 [ 897.730426][T25140] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 897.774833][T25140] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 897.846891][T25140] EXT4-fs (loop4): orphan cleanup on readonly fs [ 897.911226][T25140] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4059: comm syz.4.8679: Allocating blocks 41-42 which overlap fs metadata [ 897.984394][T25140] Quota error (device loop4): write_blk: dquota write failed [ 898.001804][T25140] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 898.020937][T25140] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.8679: Failed to acquire dquot type 0 [ 898.050807][T25152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8681'. [ 898.060422][T25152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8681'. [ 898.070120][T25140] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 898.097947][T25152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8681'. [ 898.109378][T25140] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #12: comm syz.4.8679: corrupted inode contents [ 898.129965][T25140] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #12: comm syz.4.8679: mark_inode_dirty error [ 898.198449][T25140] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #12: comm syz.4.8679: corrupted inode contents [ 898.276360][T25140] EXT4-fs error (device loop4): __ext4_ext_dirty:208: inode #12: comm syz.4.8679: mark_inode_dirty error [ 898.322328][T25140] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #12: comm syz.4.8679: corrupted inode contents [ 898.371094][T25140] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 898.404964][T25140] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #12: comm syz.4.8679: corrupted inode contents [ 898.451684][T25140] EXT4-fs error (device loop4): ext4_truncate:4314: inode #12: comm syz.4.8679: mark_inode_dirty error [ 898.485906][T25140] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 898.544987][T25140] EXT4-fs (loop4): 1 truncate cleaned up [ 898.563838][T25140] EXT4-fs (loop4): pa ffff88802284eae0: logic 1, phys. 41, len 23 [ 898.571786][T25140] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5393: group 0, free 22, pa_free 23 [ 898.591617][T25168] comedi comedi1: dt2815: I/O port conflict (0x2000009,2) [ 898.597233][T25140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 898.839776][T25176] loop0: detected capacity change from 0 to 64 [ 898.879011][T25140] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 898.915569][T25140] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 898.973250][T25140] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 899.049500][T25183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8693'. [ 899.186924][T24367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.313240][T25191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8697'. [ 899.417513][T25195] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 899.562376][T25200] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8701'. [ 901.144603][T25232] loop4: detected capacity change from 0 to 32768 [ 901.706269][T25273] netlink: 252 bytes leftover after parsing attributes in process `syz.4.8723'. [ 902.177805][T25292] netlink: 'syz.3.8730': attribute type 2 has an invalid length. [ 902.231694][T25292] netlink: 'syz.3.8730': attribute type 8 has an invalid length. [ 902.294820][T25292] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8730'. [ 902.586381][T25301] loop4: detected capacity change from 0 to 4096 [ 902.601160][T25301] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 902.724322][T25301] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 902.751799][T25301] ntfs3: loop4: Failed to load $Extend (-22). [ 902.768496][T25301] ntfs3: loop4: Failed to initialize $Extend. [ 902.847865][T25301] ntfs3: loop4: ino=0, attr_set_size [ 903.209180][T25317] loop4: detected capacity change from 0 to 2048 [ 903.254146][T25317] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 903.948878][T25338] xt_hashlimit: size too large, truncated to 1048576 [ 903.994600][T25335] loop3: detected capacity change from 0 to 4096 [ 904.018878][T25335] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 904.136657][T25335] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 904.204186][T25335] ntfs3: loop3: Failed to load $Extend (-22). [ 904.242591][T25335] ntfs3: loop3: Failed to initialize $Extend. [ 904.403027][T25335] ntfs3: loop3: ino=0, attr_set_size [ 904.728257][T25353] netlink: 4168 bytes leftover after parsing attributes in process `syz.3.8755'. [ 906.740117][T25395] overlayfs: conflicting options: userxattr,metacopy=on [ 906.844978][T25397] loop3: detected capacity change from 0 to 1024 [ 906.902418][T25397] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 906.917378][T25399] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.8778'. [ 906.931563][T25397] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 906.959532][T25397] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 906.977307][T25397] EXT4-fs (loop3): orphan cleanup on readonly fs [ 906.991932][T25397] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.8777: Freeing blocks not in datazone - block = 0, count = 4096 [ 907.021882][T25397] EXT4-fs (loop3): Remounting filesystem read-only [ 907.066132][T25397] EXT4-fs (loop3): 1 orphan inode deleted [ 907.095879][T25397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 907.163357][T25397] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.687411][ T28] audit: type=1326 audit(2000000314.870:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25414 comm="syz.0.8785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f9e159 code=0x7ffc0000 [ 907.721776][ T28] audit: type=1326 audit(2000000314.870:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25414 comm="syz.0.8785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f9e159 code=0x7ffc0000 [ 907.746450][ T28] audit: type=1326 audit(2000000314.870:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25414 comm="syz.0.8785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f9e159 code=0x7ffc0000 [ 907.775196][ T28] audit: type=1326 audit(2000000314.870:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25414 comm="syz.0.8785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f4299f9e159 code=0x7ffc0000 [ 907.800074][ T28] audit: type=1326 audit(2000000314.870:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25414 comm="syz.0.8785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f9e159 code=0x7ffc0000 [ 907.841449][ T9621] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 907.841480][ T28] audit: type=1326 audit(2000000314.870:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25414 comm="syz.0.8785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f9e159 code=0x7ffc0000 [ 907.913123][T25417] loop3: detected capacity change from 0 to 4096 [ 907.919710][ T28] audit: type=1326 audit(2000000314.870:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25414 comm="syz.0.8785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4299f9e159 code=0x7ffc0000 [ 907.946947][T25417] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 907.960775][T25417] ntfs3: loop3: It is recommened to use chkdsk. [ 907.997863][ T28] audit: type=1326 audit(2000000314.900:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25414 comm="syz.0.8785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4299f9e159 code=0x7ffc0000 [ 908.062815][ T28] audit: type=1326 audit(2000000314.900:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25414 comm="syz.0.8785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4299f9e159 code=0x7ffc0000 [ 908.077143][ T9621] usb 2-1: Using ep0 maxpacket: 16 [ 908.143568][ T9621] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9 [ 908.182584][ T9621] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26223, setting to 1024 [ 908.206842][ T9621] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 908.281431][ T9621] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 908.290553][ T9621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.331030][ T9621] usb 2-1: config 0 descriptor?? [ 908.354984][T25412] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 908.383014][ T9621] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input49 [ 908.439657][T25425] loop3: detected capacity change from 0 to 512 [ 908.476152][T25425] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 908.528378][T25425] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 908.569220][T25425] EXT4-fs (loop3): orphan cleanup on readonly fs [ 908.632489][T25425] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.8790: Allocating blocks 41-42 which overlap fs metadata [ 908.724745][T25425] Quota error (device loop3): write_blk: dquota write failed [ 908.758991][T25425] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.8790: Failed to acquire dquot type 0 [ 908.789814][T25425] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 908.829045][T25425] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.8790: corrupted inode contents [ 908.843150][ T9621] usb 2-1: USB disconnect, device number 116 [ 908.879498][T25425] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #12: comm syz.3.8790: mark_inode_dirty error [ 908.925124][T25425] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.8790: corrupted inode contents [ 908.946165][T25425] EXT4-fs error (device loop3): __ext4_ext_dirty:208: inode #12: comm syz.3.8790: mark_inode_dirty error [ 908.976368][T25425] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.8790: corrupted inode contents [ 909.008786][T25425] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 909.032252][T25425] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.8790: corrupted inode contents [ 909.053131][T25425] EXT4-fs error (device loop3): ext4_truncate:4314: inode #12: comm syz.3.8790: mark_inode_dirty error [ 909.076679][T25425] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 909.128089][T25425] EXT4-fs (loop3): 1 truncate cleaned up [ 909.146693][T25425] EXT4-fs (loop3): pa ffff88802284e570: logic 1, phys. 41, len 23 [ 909.155008][T25425] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5393: group 0, free 22, pa_free 23 [ 909.182336][T25425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 909.283004][T25425] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 909.316517][T25425] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 909.349343][T25425] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 909.433236][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.727645][T25457] loop0: detected capacity change from 0 to 4096 [ 909.797660][T25461] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 910.041537][ T9621] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 910.244577][ T9621] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 910.263695][ T9621] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 910.286013][ T9621] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 910.309975][ T9621] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 910.335953][ T9621] usb 2-1: config 1 has no interface number 0 [ 910.345515][T25480] netlink: 'syz.0.8816': attribute type 3 has an invalid length. [ 910.353838][ T9621] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 910.383361][ T9621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.431961][ T9621] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 910.628960][ T9621] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 910.648265][ T9621] snd_usb_pod 2-1:1.1: invalid control EP [ 910.667633][ T9621] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 910.681982][ T9621] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 910.689821][ T9621] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 910.827567][ T9621] usb 2-1: USB disconnect, device number 117 [ 911.008192][T25476] loop3: detected capacity change from 0 to 32768 [ 911.032842][T25476] XFS: attr2 mount option is deprecated. [ 911.076702][T25476] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 911.103049][T25476] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 911.207084][T25476] XFS (loop3): Ending clean mount [ 911.485562][ T5783] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 912.172467][T25538] xt_NFQUEUE: number of total queues is 0 [ 912.325938][T25528] loop4: detected capacity change from 0 to 32768 [ 912.370121][T25528] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 912.409754][T25528] JBD2: Ignoring recovery information on journal [ 912.503831][T25528] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 912.949289][T24367] ocfs2: Unmounting device (7,4) on (node local) [ 913.491485][ T5820] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 913.687041][ T5820] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 913.699393][ T5820] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 913.708552][ T5820] usb 2-1: Product: syz [ 913.713208][ T5820] usb 2-1: Manufacturer: syz [ 913.717869][ T5820] usb 2-1: SerialNumber: syz [ 913.729361][ T5820] usb 2-1: config 0 descriptor?? [ 913.986618][ T5820] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 914.060779][T25593] CIFS: VFS: Unknown vers= option specified: -B]ąRB ,gWy 2"/>4Z ҄FYcIGQB*0⑒V&SmZ)`sAk!Owz"RLL|ZuWG4&޺[G [ 914.178433][ T5820] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 914.201410][ T5820] peak_usb 2-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 914.314535][ T5820] peak_usb: probe of 2-1:0.0 failed with error -71 [ 914.341997][ T5820] usb 2-1: USB disconnect, device number 118 [ 914.400545][T25597] loop4: detected capacity change from 0 to 4096 [ 914.445279][T25581] loop3: detected capacity change from 0 to 32768 [ 914.465523][T25597] __ntfs_error: 1 callbacks suppressed [ 914.465541][T25597] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 914.497199][T25597] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 914.524864][T25597] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 914.546529][T25597] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 914.593554][T25597] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 914.622946][T25597] ntfs: volume version 3.1. [ 914.641699][T25597] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 914.659640][T25597] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 914.688062][T23138] read_mapping_page failed! [ 914.711069][T25597] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 914.711063][T23138] ERROR: (device loop3): txCommit: [ 914.711063][T23138] [ 914.747173][T25597] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 914.768050][T23138] jfs_write_inode: jfs_commit_inode failed! [ 914.774396][T25597] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 914.788529][T25603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8872'. [ 914.862058][T25603] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 915.077762][T25609] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.8875'. [ 915.237467][T25614] netlink: 'syz.1.8878': attribute type 2 has an invalid length. [ 915.267006][T25614] netlink: 'syz.1.8878': attribute type 1 has an invalid length. [ 915.453036][T25617] loop0: detected capacity change from 0 to 8 [ 915.503554][T25615] loop3: detected capacity change from 0 to 4096 [ 915.588069][T25615] ntfs: volume version 3.1. [ 917.433056][T25693] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.8914'. [ 917.472173][T25693] netlink: 22808 bytes leftover after parsing attributes in process `syz.0.8914'. [ 919.085395][T25730] loop0: detected capacity change from 0 to 32768 [ 919.098951][T25730] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 919.130958][T25730] JBD2: Ignoring recovery information on journal [ 919.207208][T25730] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 919.344759][T25734] loop4: detected capacity change from 0 to 32768 [ 919.372240][T25734] XFS: attr2 mount option is deprecated. [ 919.433470][T25734] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 919.486746][T25734] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 919.605713][ T5780] ocfs2: Unmounting device (7,0) on (node local) [ 919.730296][T25734] XFS (loop4): Ending clean mount [ 919.901527][T24367] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 920.352783][T25780] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 920.796557][T25800] loop0: detected capacity change from 0 to 512 [ 920.821765][T25800] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 920.867216][T25800] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 920.883294][T25800] EXT4-fs (loop0): orphan cleanup on readonly fs [ 920.933428][T25800] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.8959: Allocating blocks 41-42 which overlap fs metadata [ 920.972480][T25800] __quota_error: 18 callbacks suppressed [ 920.972500][T25800] Quota error (device loop0): write_blk: dquota write failed [ 920.991741][T25800] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 921.023336][T25800] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.8959: Failed to acquire dquot type 0 [ 921.037253][T25809] syz.4.8965: attempt to access beyond end of device [ 921.037253][T25809] nbd4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 921.050208][T25809] F2FS-fs (nbd4): Unable to read 1th superblock [ 921.057646][T25809] syz.4.8965: attempt to access beyond end of device [ 921.057646][T25809] nbd4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 921.080045][T25809] F2FS-fs (nbd4): Unable to read 2th superblock [ 921.089426][T25800] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 921.105607][T25800] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #12: comm syz.0.8959: corrupted inode contents [ 921.125937][T25800] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #12: comm syz.0.8959: mark_inode_dirty error [ 921.169169][T25800] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #12: comm syz.0.8959: corrupted inode contents [ 921.189346][T25800] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #12: comm syz.0.8959: mark_inode_dirty error [ 921.222870][T25800] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #12: comm syz.0.8959: corrupted inode contents [ 921.248350][T25800] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 921.260777][T25800] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #12: comm syz.0.8959: corrupted inode contents [ 921.298631][T25800] EXT4-fs error (device loop0): ext4_truncate:4314: inode #12: comm syz.0.8959: mark_inode_dirty error [ 921.319740][T25813] loop4: detected capacity change from 0 to 1764 [ 921.329111][T25800] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 921.341003][T25800] EXT4-fs (loop0): 1 truncate cleaned up [ 921.356517][T25800] EXT4-fs (loop0): pa ffff888078509658: logic 1, phys. 41, len 23 [ 921.364482][T25800] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5393: group 0, free 22, pa_free 23 [ 921.417135][T25800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 921.616878][T25800] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 921.642185][T25800] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 921.695052][T25800] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 921.748067][T25826] netlink: 'syz.4.8972': attribute type 32 has an invalid length. [ 921.857028][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.285474][T25846] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8983'. [ 922.443632][T25844] loop3: detected capacity change from 0 to 4096 [ 922.504865][T25844] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 922.533634][T25844] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 922.565819][T25844] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 922.578931][T25844] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 922.598018][T25844] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 922.611590][T25844] ntfs: volume version 3.1. [ 922.656902][T25844] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 922.682618][T25844] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 922.711914][T25844] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 923.917358][T25868] loop0: detected capacity change from 0 to 32768 [ 923.946886][T25868] XFS: attr2 mount option is deprecated. [ 924.022638][T25868] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 924.035566][T25868] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 924.170816][T25868] XFS (loop0): Ending clean mount [ 924.182960][T25890] loop3: detected capacity change from 0 to 2048 [ 924.402675][T25890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 924.502111][ T5780] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 924.647345][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.934992][T25924] loop4: detected capacity change from 0 to 256 [ 925.046165][T25924] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 925.344746][T25934] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 925.929691][T25930] loop0: detected capacity change from 0 to 32768 [ 926.054072][T25930] ERROR: (device loop0): diAllocAG: nfreeinos = 0, but iag on freelist [ 926.054072][T25930] [ 926.091590][T25930] ERROR: (device loop0): remounting filesystem as read-only [ 926.098968][T25930] ialloc: diAlloc returned -5! [ 927.005684][T25988] loop3: detected capacity change from 0 to 256 [ 927.382933][T26000] netlink: 'syz.1.9052': attribute type 7 has an invalid length. [ 928.223386][T26032] loop0: detected capacity change from 0 to 2048 [ 928.277003][T26032] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 928.351596][T26041] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 928.941876][T26061] netlink: 'syz.0.9081': attribute type 3 has an invalid length. [ 928.972039][T26061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9081'. [ 929.679696][T26091] loop0: detected capacity change from 0 to 64 [ 929.851485][ T27] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 930.077120][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 930.103002][ T27] usb 4-1: config index 0 descriptor too short (expected 26766, got 142) [ 930.113568][ T27] usb 4-1: config 1 has too many interfaces: 173, using maximum allowed: 32 [ 930.156929][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 930.172442][T26105] loop0: detected capacity change from 0 to 24 [ 930.189370][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 173 [ 930.200776][T26105] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 930.231622][ T27] usb 4-1: string descriptor 0 read error: -22 [ 930.248402][ T27] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 930.258197][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.266732][T26105] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 930.297900][ T27] usb 4-1: selecting invalid altsetting 1 [ 930.305844][T26105] romfs: read error for inode 0x70040 [ 930.315609][ T27] usb 4-1: unit 6 not found! [ 930.760578][ T27] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 930.798063][ T27] usb 4-1: USB disconnect, device number 111 [ 930.806685][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 931.028230][T26121] loop0: detected capacity change from 0 to 4096 [ 931.038481][T26121] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 931.091549][T26121] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 931.099874][T26121] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 931.202815][T26121] ntfs3: loop0: ino=1e, mi_enum_attr [ 931.220888][T26121] ntfs3: loop0: ino=1e, mi_enum_attr [ 931.315111][T26133] loop4: detected capacity change from 0 to 164 [ 931.330764][ T2954] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 931.365941][T26133] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 931.371600][ T5780] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 931.400923][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.409587][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.421773][ T5780] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 931.428793][ T5780] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 931.524209][ T59] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 931.607689][T26139] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9123'. [ 931.817906][T26147] loop0: detected capacity change from 0 to 64 [ 932.168072][T26160] loop4: detected capacity change from 0 to 8 [ 932.199509][T26160] SQUASHFS error: zlib decompression failed, data probably corrupt [ 932.228548][T26160] SQUASHFS error: Failed to read block 0x9b: -5 [ 932.255192][T26160] SQUASHFS error: Unable to read metadata cache entry [99] [ 932.285553][T26160] SQUASHFS error: Unable to read inode 0x127 [ 932.814473][T26181] netlink: 'syz.1.9142': attribute type 49 has an invalid length. [ 932.938916][T26187] loop0: detected capacity change from 0 to 256 [ 932.960118][T26181] ip6gretap0: entered promiscuous mode [ 932.981906][T26181] ip6gretap0: entered allmulticast mode [ 933.212500][T26194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9148'. [ 933.244508][T26194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9148'. [ 933.281944][T26194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9148'. [ 933.637577][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.677116][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.708453][T26210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 933.731082][T26213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 933.842482][T26220] loop0: detected capacity change from 0 to 16 [ 933.886281][T26220] erofs: (device loop0): mounted with root inode @ nid 36. [ 935.445151][T26282] loop4: detected capacity change from 0 to 512 [ 935.473025][T26282] EXT4-fs: Ignoring removed i_version option [ 935.512286][T26282] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 935.548390][T26283] loop0: detected capacity change from 0 to 4096 [ 935.608912][T26282] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 935.681660][T26282] __quota_error: 6 callbacks suppressed [ 935.681679][T26282] Quota error (device loop4): write_blk: dquota write failed [ 935.689758][T26283] ntfs: (device loop0): parse_options(): NLS character set is]9-5 not found. Using previous one cp866. [ 935.695113][T26282] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 935.726779][T26282] Quota error (device loop4): write_blk: dquota write failed [ 935.735287][T26282] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 935.755395][T26282] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.9182: Failed to acquire dquot type 1 [ 935.796810][T26282] EXT4-fs (loop4): 1 truncate cleaned up [ 935.807972][T26283] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 935.827091][T26282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 935.847744][T26283] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 935.895214][T26283] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 935.933493][T26283] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 935.977125][T26283] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 936.006448][T26282] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.9182: Failed to acquire dquot type 1 [ 936.042483][T26283] ntfs: volume version 3.1. [ 936.141233][T24367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.203944][T26327] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 937.641811][T26344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9211'. [ 938.280805][T26366] bond5: option all_slaves_active: invalid value (179) [ 938.307523][T26366] bond5 (unregistering): Released all slaves [ 938.427541][T26374] No source specified [ 938.702882][T26385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9230'. [ 938.865942][T26388] loop0: detected capacity change from 0 to 256 [ 939.146581][T26397] loop0: detected capacity change from 0 to 1024 [ 939.157923][T26397] EXT4-fs: Ignoring removed orlov option [ 939.167630][T26397] EXT4-fs: Ignoring removed i_version option [ 939.232561][T26397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 939.359503][T26382] loop3: detected capacity change from 0 to 32768 [ 939.386706][T26382] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.9229 (26382) [ 939.434827][T26382] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 939.466646][T26382] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 939.490145][T26382] BTRFS info (device loop3): using free space tree [ 939.596238][T26414] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9241'. [ 939.605554][T26414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9241'. [ 939.615214][T26414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9241'. [ 939.620626][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.712360][T26382] BTRFS info (device loop3): enabling ssd optimizations [ 939.721502][T26382] BTRFS info (device loop3): auto enabling async discard [ 939.960153][ T5783] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 940.415503][T26445] loop3: detected capacity change from 0 to 1024 [ 941.101980][T26460] ip6erspan0: entered allmulticast mode [ 941.283321][T26466] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 941.316114][T26466] bridge5: entered promiscuous mode [ 941.332051][T26466] bridge5: entered allmulticast mode [ 941.344138][T26470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9263'. [ 941.905625][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 941.905643][ T28] audit: type=1326 audit(2000000349.090:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26489 comm="syz.3.9273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 941.936602][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.990789][ T28] audit: type=1326 audit(2000000349.090:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26489 comm="syz.3.9273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 942.022122][ T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 942.048450][ T28] audit: type=1326 audit(2000000349.100:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26489 comm="syz.3.9273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 942.072630][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.130649][ T28] audit: type=1326 audit(2000000349.100:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26489 comm="syz.3.9273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 942.154950][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.211550][ T28] audit: type=1326 audit(2000000349.100:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26489 comm="syz.3.9273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 942.235696][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.243855][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.259411][T26497] netlink: 'syz.0.9276': attribute type 3 has an invalid length. [ 942.267480][ T27] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 942.276953][ T27] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 942.310513][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.312163][ T28] audit: type=1326 audit(2000000349.100:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26489 comm="syz.3.9273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 942.353573][ T27] usb 5-1: Product: syz [ 942.357825][ T27] usb 5-1: Manufacturer: syz [ 942.385940][ T27] usb 5-1: SerialNumber: syz [ 942.411519][ T27] usb-storage 5-1:1.0: USB Mass Storage device detected [ 942.413353][ T28] audit: type=1326 audit(2000000349.100:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26489 comm="syz.3.9273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 942.469536][ T27] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 942.484322][ T28] audit: type=1326 audit(2000000349.100:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26489 comm="syz.3.9273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 942.533744][ T27] scsi host1: usb-storage 5-1:1.0 [ 942.623396][ T27] usb 5-1: USB disconnect, device number 4 [ 942.663635][ T28] audit: type=1326 audit(2000000349.100:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26489 comm="syz.3.9273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 942.801209][T26510] loop0: detected capacity change from 0 to 8 [ 943.001631][T26516] binder: 26515:26516 unknown command 1074553619 [ 943.011851][T26516] binder: 26515:26516 ioctl c0306201 200000000640 returned -22 [ 943.279978][ T28] audit: type=1326 audit(2000000350.460:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26524 comm="syz.3.9288" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 943.304414][ C0] vkms_vblank_simulate: vblank timer overrun [ 943.571103][T26537] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9294'. [ 943.934105][T26548] ip6erspan0: entered promiscuous mode [ 943.974055][T26548] ip6erspan0: entered allmulticast mode [ 944.567906][T26575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9312'. [ 945.088419][T26597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9321'. [ 945.341902][T26609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9324'. [ 945.781767][ T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 945.789529][ T9621] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 945.821540][ T5843] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 945.982376][ T9621] usb 2-1: Using ep0 maxpacket: 8 [ 945.994703][ T27] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 946.006554][ T27] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 946.016713][ T9621] usb 2-1: unable to get BOS descriptor or descriptor too short [ 946.029092][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 946.037137][ T27] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 946.048640][ T9621] usb 2-1: config 8 has an invalid interface number: 61 but max is 2 [ 946.061733][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 946.076059][ T9621] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 946.085915][ T5843] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 946.100029][ T27] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 946.111041][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.121443][ T9621] usb 2-1: config 8 has no interface number 0 [ 946.127613][ T9621] usb 2-1: config 8 interface 61 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 946.137755][ T27] usb 5-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 946.147078][ T5843] usb 4-1: Product: syz [ 946.153541][ T5843] usb 4-1: Manufacturer: syz [ 946.158202][ T5843] usb 4-1: SerialNumber: syz [ 946.163086][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.171161][ T9621] usb 2-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0 [ 946.188774][T26612] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 946.192633][ T5843] usb 4-1: config 0 descriptor?? [ 946.201287][ T9621] usb 2-1: config 8 interface 61 has no altsetting 0 [ 946.211607][T26612] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 946.225323][ T9621] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 946.236115][T26612] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 946.238265][ T5843] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 946.251073][ T9621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.259360][ T9621] usb 2-1: Product: syz [ 946.272579][ T27] mos7720 5-1:1.0: Moschip 2 port adapter converter detected [ 946.282621][ T5843] usb 4-1: Detected FT-X [ 946.291053][ T9621] usb 2-1: Manufacturer: syz [ 946.296333][ T9621] usb 2-1: SerialNumber: syz [ 946.506535][T26639] loop0: detected capacity change from 0 to 256 [ 946.553776][ T9621] bfusb: probe of 2-1:8.61 failed with error -5 [ 946.572207][ T9621] usb 2-1: USB disconnect, device number 119 [ 946.630838][ T5843] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 946.653309][ T5843] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 946.673043][ T5843] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 946.697076][ T5843] usb 4-1: USB disconnect, device number 112 [ 946.717859][ T5843] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 946.752677][ T5843] ftdi_sio 4-1:0.0: device disconnected [ 946.758804][ T27] usb 5-1: mos7720: usb_control_msg() failed: -71 [ 946.808953][ T27] usb 5-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 946.878927][ T27] usb 5-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 946.962367][ T27] usb 5-1: USB disconnect, device number 5 [ 946.968342][ C1] usb 5-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 947.032132][ T27] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 947.057068][T26643] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 947.078426][ T27] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 947.116805][ T27] mos7720 5-1:1.0: device disconnected [ 947.667782][T26657] loop3: detected capacity change from 0 to 64 [ 947.717135][T26660] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 948.713153][T26693] ipt_ECN: cannot use operation on non-tcp rule [ 949.523645][T26718] dlm: no locking on control device [ 949.780991][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 949.781008][ T28] audit: type=1326 audit(2000000356.960:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26727 comm="syz.3.9372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 949.855410][T26730] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9374'. [ 949.860967][ T28] audit: type=1326 audit(2000000356.960:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26727 comm="syz.3.9372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 949.890207][ T28] audit: type=1326 audit(2000000356.990:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26727 comm="syz.3.9372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 949.966049][ T28] audit: type=1326 audit(2000000356.990:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26727 comm="syz.3.9372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 950.013478][ T28] audit: type=1326 audit(2000000357.000:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26727 comm="syz.3.9372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 950.059424][ T28] audit: type=1326 audit(2000000357.080:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26727 comm="syz.3.9372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 950.165330][ T28] audit: type=1326 audit(2000000357.080:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26727 comm="syz.3.9372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 950.190485][ C0] vkms_vblank_simulate: vblank timer overrun [ 950.231465][ T28] audit: type=1326 audit(2000000357.080:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26727 comm="syz.3.9372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 950.255802][ C0] vkms_vblank_simulate: vblank timer overrun [ 950.328354][ T28] audit: type=1326 audit(2000000357.080:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26727 comm="syz.3.9372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbb0ff9e159 code=0x7ffc0000 [ 950.352548][ C0] vkms_vblank_simulate: vblank timer overrun [ 950.588837][T26749] loop0: detected capacity change from 0 to 256 [ 950.673720][T26753] SET target dimension over the limit! [ 951.590205][T26781] loop0: detected capacity change from 0 to 4096 [ 951.619416][T26781] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 951.682676][T26781] ntfs: volume version 3.1. [ 952.624153][T26821] loop0: detected capacity change from 0 to 1024 [ 952.662344][T26821] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 952.725584][T26821] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #3: block 1: comm syz.0.9418: lblock 1 mapped to illegal pblock 1 (length 1) [ 952.770289][T26821] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.9418: Failed to acquire dquot type 0 [ 952.788590][T26821] EXT4-fs error (device loop0): ext4_free_blocks:6694: comm syz.0.9418: Freeing blocks not in datazone - block = 0, count = 4096 [ 952.819999][T26821] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.9418: Invalid inode bitmap blk 0 in block_group 0 [ 952.842178][ T2954] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 952.859256][T26821] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 952.881891][T26823] xt_CT: No such helper "snmp" [ 952.892253][T26821] EXT4-fs (loop0): 1 orphan inode deleted [ 952.899448][T26821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.923698][ T2954] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 0 [ 953.081941][T26821] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 953.167035][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.726980][T26862] netlink: 'syz.4.9437': attribute type 1 has an invalid length. [ 953.735163][ T5820] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 953.956847][T26872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9441'. [ 953.967451][ T5820] usb 2-1: not running at top speed; connect to a high speed hub [ 953.977457][ T5820] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 953.990654][T26872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9441'. [ 953.999905][ T5820] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 954.020576][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.045336][ T5820] mos7720 2-1:1.0: Moschip 2 port adapter converter detected [ 954.369120][T26883] loop4: detected capacity change from 0 to 16 [ 954.391786][T26883] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 954.455930][ T5820] usb 2-1: mos7720: usb_control_msg() failed: -71 [ 954.480591][ T5820] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 954.548098][ T5820] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 954.591761][ T5820] usb 2-1: USB disconnect, device number 120 [ 954.634763][ T5820] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 954.673468][ T5820] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 954.719753][ T5820] mos7720 2-1:1.0: device disconnected [ 954.835355][T26894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9453'. [ 954.846387][T26894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9453'. [ 955.419038][T26915] cgroup: Invalid name [ 956.217617][T26942] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 956.223527][T26943] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9476'. [ 956.313591][T26917] loop4: detected capacity change from 0 to 32768 [ 956.382609][T26948] netlink: 'syz.3.9478': attribute type 1 has an invalid length. [ 956.390704][T26948] netlink: 'syz.3.9478': attribute type 2 has an invalid length. [ 956.444225][T26917] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 956.576109][T26917] XFS (loop4): Ending clean mount [ 956.750296][T26963] loop0: detected capacity change from 0 to 8 [ 956.786121][T24367] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 956.834815][T26963] SQUASHFS error: Unable to read directory block [629:26] [ 957.251577][T26973] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9487'. [ 957.510858][T26982] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9490'. [ 957.523440][T26983] loop0: detected capacity change from 0 to 64 [ 957.611483][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 957.611501][ T28] audit: type=1800 audit(2000000364.780:727): pid=26983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9492" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 958.533726][T27003] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 958.919868][T27016] loop0: detected capacity change from 0 to 128 [ 958.930636][T27019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9510'. [ 958.951704][T27016] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 958.970877][T27016] hpfs: filesystem error: improperly stopped [ 958.977179][T27016] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 958.987655][T27016] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 958.999223][T27019] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9510'. [ 959.017254][T27016] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000001 [ 959.022588][ T5819] usb 2-1: new low-speed USB device number 121 using dummy_hcd [ 959.245389][ T5819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 959.268091][ T5819] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 959.277782][ T5819] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 959.292154][T27027] loop4: detected capacity change from 0 to 128 [ 959.301859][ T5819] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 959.310963][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.346132][ T5819] hub 2-1:1.0: bad descriptor, ignoring hub [ 959.362038][ T5819] hub: probe of 2-1:1.0 failed with error -5 [ 959.368718][ T5819] cdc_wdm 2-1:1.0: skipping garbage [ 959.382593][ T5819] cdc_wdm 2-1:1.0: skipping garbage [ 959.401264][ T5819] cdc_wdm 2-1:1.0: skipping garbage [ 959.418958][ T5819] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 959.662105][ T5819] usb 2-1: USB disconnect, device number 121 [ 960.030761][T27050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9525'. [ 960.141907][T27054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9528'. [ 960.165084][T27054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9528'. [ 960.414351][T27062] MPI: mpi too large (107144 bits) [ 960.753005][T27076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9537'. [ 961.263380][T27094] netlink: 'syz.3.9547': attribute type 10 has an invalid length. [ 961.271295][T27094] wg1: left promiscuous mode [ 961.287809][T27094] wg1: left allmulticast mode [ 961.325110][T27094] team0: Device wg1 is of different type [ 961.967037][T27115] loop3: detected capacity change from 0 to 4096 [ 961.989402][T27115] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 962.041904][T27115] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 962.140675][T27115] ntfs: volume version 3.1. [ 962.808151][T27145] netlink: 'syz.0.9572': attribute type 20 has an invalid length. [ 962.951653][ T5819] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 963.146832][T27155] 9p: Unknown Cache mode or invalid value re [ 963.153510][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 963.168810][ T5819] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 963.182641][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.205344][ T5819] usb 5-1: Product: syz [ 963.209626][ T5819] usb 5-1: Manufacturer: syz [ 963.225949][ T5819] usb 5-1: SerialNumber: syz [ 963.253638][ T5819] usb 5-1: config 0 descriptor?? [ 963.305033][ T5819] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 963.606248][T27136] loop3: detected capacity change from 0 to 32768 [ 963.667449][T27136] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 963.695215][T27170] comedi comedi1: rti802: I/O port conflict (0x4,4) [ 963.753067][ T5819] radio-usb-si4713: probe of 5-1:0.0 failed with error -71 [ 963.784912][ T5819] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 963.818304][ T5819] usb 5-1: USB disconnect, device number 6 [ 964.012776][T27136] XFS (loop3): Ending clean mount [ 964.214951][ T5783] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 964.641573][ T5819] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 964.766759][T27200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9595'. [ 964.784761][T27200] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9595'. [ 964.856508][ T5819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.869361][ T5819] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.880286][ T5819] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 964.890837][ T5819] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 964.913046][ T5819] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 964.926503][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.935207][ T5819] usb 2-1: Product: syz [ 964.939525][ T5819] usb 2-1: Manufacturer: syz [ 964.948132][ T5819] usb 2-1: SerialNumber: syz [ 965.167448][ T5819] usb 2-1: Limiting number of CPorts to U8_MAX [ 965.209369][ T5819] usb 2-1: Not enough endpoints found in device, aborting! [ 965.246368][T27215] loop4: detected capacity change from 0 to 256 [ 965.354437][T27215] FAT-fs (loop4): Directory bread(block 64) failed [ 965.371711][ T5819] usb 2-1: USB disconnect, device number 122 [ 965.381693][T27215] FAT-fs (loop4): Directory bread(block 65) failed [ 965.388375][T27215] FAT-fs (loop4): Directory bread(block 66) failed [ 965.420051][T27215] FAT-fs (loop4): Directory bread(block 67) failed [ 965.448065][T27219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 965.455509][T27215] FAT-fs (loop4): Directory bread(block 68) failed [ 965.510794][T27215] FAT-fs (loop4): Directory bread(block 69) failed [ 965.520046][T27215] FAT-fs (loop4): Directory bread(block 70) failed [ 965.528706][T27215] FAT-fs (loop4): Directory bread(block 71) failed [ 965.535712][T27215] FAT-fs (loop4): Directory bread(block 72) failed [ 965.542842][T27215] FAT-fs (loop4): Directory bread(block 73) failed [ 965.665461][T27223] netlink: 'syz.3.9606': attribute type 1 has an invalid length. [ 965.960647][T27231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9611'. [ 966.127176][ T5779] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 966.191643][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 966.393338][T27248] loop3: detected capacity change from 0 to 2048 [ 966.405017][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 966.434365][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 966.450289][ T27] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 966.462581][T27248] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 966.483900][ T27] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 966.501833][ T27] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 966.526449][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.936177][T27260] loop0: detected capacity change from 0 to 1024 [ 967.024250][ T5819] usb 5-1: USB disconnect, device number 7 [ 967.199074][T27264] netlink: 'syz.1.9627': attribute type 11 has an invalid length. [ 967.225921][T27264] netlink: 'syz.1.9627': attribute type 5 has an invalid length. [ 967.638667][T27278] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9633'. [ 967.711415][T27278] netlink: 'syz.0.9633': attribute type 1 has an invalid length. [ 967.837503][T27286] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9637'. [ 968.136959][T27299] dlm: no locking on control device [ 968.272546][ T27] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 968.315152][T27305] loop0: detected capacity change from 0 to 16 [ 968.350206][T27305] erofs: (device loop0): mounted with root inode @ nid 36. [ 968.491586][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 968.507474][ T27] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 968.515962][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.533128][ T27] usb 5-1: config 0 has no interface number 0 [ 968.539371][ T27] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 968.551732][ T27] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 968.565529][ T27] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 968.580159][ T27] usb 5-1: config 0 interface 196 has no altsetting 0 [ 968.631487][ T27] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 968.640622][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.669903][ T27] usb 5-1: Product: syz [ 968.683290][ T27] usb 5-1: Manufacturer: syz [ 968.688061][ T27] usb 5-1: SerialNumber: syz [ 968.717881][ T27] usb 5-1: config 0 descriptor?? [ 968.959833][ T27] ipheth 5-1:0.196: Unable to find endpoints [ 968.997116][ T27] usb 5-1: USB disconnect, device number 8 [ 969.379768][T27339] binder: 27337:27339 ioctl c0046209 200000000000000 returned -22 [ 969.534336][T27344] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9666'. [ 969.888691][T27358] ieee802154 phy0 wpan0: encryption failed: -90 [ 970.020033][T27363] netlink: 'syz.3.9675': attribute type 1 has an invalid length. [ 970.507302][T27383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9684'. [ 970.537095][T27383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9684'. [ 970.855446][T27397] loop3: detected capacity change from 0 to 8 [ 970.911146][T27397] SQUASHFS error: xz decompression failed, data probably corrupt [ 970.922847][T27397] SQUASHFS error: Failed to read block 0x108: -5 [ 970.929263][T27397] SQUASHFS error: Unable to read metadata cache entry [106] [ 970.939778][T27397] SQUASHFS error: Unable to read inode 0x11f [ 971.153547][T27403] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 971.170263][T27403] bond1 (unregistering): Released all slaves [ 971.816623][T27422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9704'. [ 971.851424][T27412] loop3: detected capacity change from 0 to 32768 [ 971.893084][T27412] JBD2: Ignoring recovery information on journal [ 971.895013][T27412] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 971.895678][T27412] JBD2: bad block at offset 32 [ 971.914820][T27412] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 971.973671][T27426] netlink: 'syz.4.9705': attribute type 1 has an invalid length. [ 972.100311][T27428] netlink: 'syz.4.9706': attribute type 1 has an invalid length. [ 972.100336][T27428] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.9706'. [ 972.100356][T27428] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9706'. [ 972.281037][ T5783] ocfs2: Unmounting device (7,3) on (node local) [ 972.424122][T27432] loop3: detected capacity change from 0 to 512 [ 972.425278][T27432] EXT4-fs: Ignoring removed oldalloc option [ 972.477869][T27432] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.9708: Parent and EA inode have the same ino 15 [ 972.498460][T27432] EXT4-fs (loop3): Remounting filesystem read-only [ 972.498548][T27432] EXT4-fs (loop3): 1 orphan inode deleted [ 972.499856][T27432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 972.645914][ T5779] [ 972.648336][ T5779] ====================================================== [ 972.655394][ T5779] WARNING: possible circular locking dependency detected [ 972.662475][ T5779] syzkaller #0 Not tainted [ 972.666924][ T5779] ------------------------------------------------------ [ 972.673977][ T5779] kworker/u5:3/5779 is trying to acquire lock: [ 972.680166][ T5779] ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x41/0x550 [ 972.689547][ T5779] [ 972.689547][ T5779] but task is already holding lock: [ 972.696948][ T5779] ffffffff8e53eb68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x2e1/0xba0 [ 972.706922][ T5779] [ 972.706922][ T5779] which lock already depends on the new lock. [ 972.706922][ T5779] [ 972.717363][ T5779] [ 972.717363][ T5779] the existing dependency chain (in reverse order) is: [ 972.726411][ T5779] [ 972.726411][ T5779] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 972.734197][ T5779] __mutex_lock+0x135/0xc80 [ 972.739365][ T5779] hci_remote_features_evt+0x535/0x900 [ 972.745384][ T5779] hci_event_packet+0x807/0x1280 [ 972.750893][ T5779] hci_rx_work+0x43a/0xd60 [ 972.755935][ T5779] process_scheduled_works+0xa60/0x1600 [ 972.762068][ T5779] worker_thread+0xa5e/0xfe0 [ 972.767331][ T5779] kthread+0x2fa/0x390 [ 972.771966][ T5779] ret_from_fork+0x48/0x80 [ 972.776985][ T5779] ret_from_fork_asm+0x11/0x20 [ 972.782333][ T5779] [ 972.782333][ T5779] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 972.789674][ T5779] __mutex_lock+0x135/0xc80 [ 972.794851][ T5779] l2cap_chan_connect+0xfc/0xe30 [ 972.800433][ T5779] l2cap_sock_connect+0x586/0x760 [ 972.806027][ T5779] kernel_connect+0x142/0x1c0 [ 972.811344][ T5779] rfcomm_dlc_open+0xa1f/0xec0 [ 972.816662][ T5779] rfcomm_sock_connect+0x2ed/0x600 [ 972.822459][ T5779] __sys_connect+0x3da/0x470 [ 972.827603][ T5779] __x64_sys_connect+0x7a/0x90 [ 972.832934][ T5779] do_syscall_64+0x55/0xb0 [ 972.837995][ T5779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 972.844448][ T5779] [ 972.844448][ T5779] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 972.851876][ T5779] __lock_acquire+0x37ef/0x7d80 [ 972.857287][ T5779] lock_acquire+0x19e/0x420 [ 972.862341][ T5779] __mutex_lock+0x135/0xc80 [ 972.867398][ T5779] rfcomm_security_cfm+0x41/0x550 [ 972.872982][ T5779] hci_auth_complete_evt+0x366/0xba0 [ 972.878815][ T5779] hci_event_packet+0x807/0x1280 [ 972.884305][ T5779] hci_rx_work+0x43a/0xd60 [ 972.889276][ T5779] process_scheduled_works+0xa60/0x1600 [ 972.895382][ T5779] worker_thread+0xa5e/0xfe0 [ 972.900528][ T5779] kthread+0x2fa/0x390 [ 972.905150][ T5779] ret_from_fork+0x48/0x80 [ 972.910123][ T5779] ret_from_fork_asm+0x11/0x20 [ 972.915448][ T5779] [ 972.915448][ T5779] other info that might help us debug this: [ 972.915448][ T5779] [ 972.925697][ T5779] Chain exists of: [ 972.925697][ T5779] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 972.925697][ T5779] [ 972.938249][ T5779] Possible unsafe locking scenario: [ 972.938249][ T5779] [ 972.945719][ T5779] CPU0 CPU1 [ 972.951116][ T5779] ---- ---- [ 972.956507][ T5779] lock(hci_cb_list_lock); [ 972.961040][ T5779] lock(&hdev->lock); [ 972.967657][ T5779] lock(hci_cb_list_lock); [ 972.974711][ T5779] lock(rfcomm_mutex); [ 972.978894][ T5779] [ 972.978894][ T5779] *** DEADLOCK *** [ 972.978894][ T5779] [ 972.987169][ T5779] 4 locks held by kworker/u5:3/5779: [ 972.992474][ T5779] #0: ffff88805f589138 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 973.003503][ T5779] #1: ffffc9000446fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 973.015566][ T5779] #2: ffff88802e2c40b8 (&hdev->lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x98/0xba0 [ 973.025362][ T5779] #3: ffffffff8e53eb68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x2e1/0xba0 [ 973.035693][ T5779] [ 973.035693][ T5779] stack backtrace: [ 973.041614][ T5779] CPU: 0 PID: 5779 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 973.049300][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 973.059394][ T5779] Workqueue: hci1 hci_rx_work [ 973.064207][ T5779] Call Trace: [ 973.067519][ T5779] [ 973.070615][ T5779] dump_stack_lvl+0x18c/0x250 [ 973.075346][ T5779] ? load_image+0x420/0x420 [ 973.079980][ T5779] ? show_regs_print_info+0x20/0x20 [ 973.085262][ T5779] ? print_circular_bug+0x12b/0x1a0 [ 973.090504][ T5779] check_noncircular+0x2fc/0x400 [ 973.095577][ T5779] ? print_deadlock_bug+0x5d0/0x5d0 [ 973.100914][ T5779] ? lockdep_lock+0xf5/0x230 [ 973.105548][ T5779] ? _find_first_zero_bit+0xd6/0x100 [ 973.110941][ T5779] __lock_acquire+0x37ef/0x7d80 [ 973.115854][ T5779] ? verify_lock_unused+0x140/0x140 [ 973.121097][ T5779] ? l2cap_security_cfm+0x1277/0x1300 [ 973.126509][ T5779] ? __lock_acquire+0x7d80/0x7d80 [ 973.131579][ T5779] lock_acquire+0x19e/0x420 [ 973.136126][ T5779] ? rfcomm_security_cfm+0x41/0x550 [ 973.141376][ T5779] ? __might_sleep+0xe0/0xe0 [ 973.146012][ T5779] ? read_lock_is_recursive+0x20/0x20 [ 973.151426][ T5779] ? __mutex_trylock_common+0x160/0x270 [ 973.157023][ T5779] __mutex_lock+0x135/0xc80 [ 973.161562][ T5779] ? rfcomm_security_cfm+0x41/0x550 [ 973.166809][ T5779] ? trace_contention_end+0x39/0xe0 [ 973.172039][ T5779] ? __mutex_lock+0x30d/0xc80 [ 973.176748][ T5779] ? rfcomm_security_cfm+0x41/0x550 [ 973.181984][ T5779] ? mutex_lock_nested+0x20/0x20 [ 973.186955][ T5779] ? hci_auth_complete_evt+0x2e1/0xba0 [ 973.192446][ T5779] ? mgmt_auth_failed+0x2ca/0x4f0 [ 973.197511][ T5779] ? mutex_lock_nested+0x20/0x20 [ 973.202484][ T5779] ? rcu_is_watching+0x15/0xb0 [ 973.207294][ T5779] rfcomm_security_cfm+0x41/0x550 [ 973.212382][ T5779] ? hci_conn_hash_lookup_handle+0x22e/0x240 [ 973.218402][ T5779] ? rfcomm_send_msc+0x360/0x360 [ 973.223373][ T5779] hci_auth_complete_evt+0x366/0xba0 [ 973.228701][ T5779] ? hci_disconn_complete_evt+0x900/0x900 [ 973.234458][ T5779] ? skb_pull_data+0xf0/0x1f0 [ 973.239231][ T5779] ? hci_disconn_complete_evt+0x900/0x900 [ 973.244985][ T5779] hci_event_packet+0x807/0x1280 [ 973.250145][ T5779] ? __lock_acquire+0x7d80/0x7d80 [ 973.255561][ T5779] ? lock_chain_count+0x20/0x20 [ 973.260454][ T5779] ? bis_list+0x290/0x290 [ 973.264853][ T5779] ? kcov_remote_start+0x513/0x810 [ 973.270127][ T5779] ? lockdep_hardirqs_on+0x98/0x150 [ 973.275364][ T5779] ? hci_send_to_monitor+0xd7/0x4f0 [ 973.280607][ T5779] hci_rx_work+0x43a/0xd60 [ 973.285066][ T5779] ? process_scheduled_works+0x975/0x1600 [ 973.290824][ T5779] process_scheduled_works+0xa60/0x1600 [ 973.296413][ T5779] ? worker_attach_to_pool+0x370/0x370 [ 973.301931][ T5779] ? assign_work+0x3cc/0x5d0 [ 973.306558][ T5779] worker_thread+0xa5e/0xfe0 [ 973.311190][ T5779] kthread+0x2fa/0x390 [ 973.315301][ T5779] ? pr_cont_work+0x550/0x550 [ 973.320021][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 973.324631][ T5779] ret_from_fork+0x48/0x80 [ 973.329071][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 973.333766][ T5779] ret_from_fork_asm+0x11/0x20 [ 973.338596][ T5779] [ 973.341687][ C0] vkms_vblank_simulate: vblank timer overrun [ 973.422745][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.467297][T27440] bond5: entered promiscuous mode [ 973.695105][T27443] loop3: detected capacity change from 0 to 32768 [ 973.711513][T27443] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.9711 (27443) [ 973.730085][T27443] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 973.740407][T27443] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 973.749646][T27443] BTRFS info (device loop3): enabling ssd optimizations [ 973.756974][T27443] BTRFS info (device loop3): not using ssd optimizations [ 973.764653][T27443] BTRFS info (device loop3): turning off barriers [ 973.771182][T27443] BTRFS info (device loop3): use no compression [ 973.777864][T27443] BTRFS info (device loop3): using free space tree [ 973.828974][ T5783] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 979.541515][ T5779] Bluetooth: hci1: command 0x0406 tx timeout